Exploit for Use After Free in Linux Linux_Kernel

GhostLock CVE-2026-43499 – Redmi K70 Ultra rothko A data-...

xss-lab-writeup

My First XSS Lab: Reflected, Stored & Fake Login Attack By:...

📄 EZ Game Booster 1.0.0 Insecure Credential Storage

EZ Game Booster version 1.0.0 stores cleartext credentials in a .NET user.config file. Exploit Title: EZ Game Booster v1.0.0 - Cleartext Credentials in user.config Date: 2026-07-16 Exploit Author: Alireza Chegini Vendor Homepage: https://ezsystemrepairs.com Software Link:...

📄 Skillable SCORM userId Authorization Bypass

Skillable's SCORM lab launch endpoint validates a launch token but enforces per-user allocation limits using a browser-supplied userId that is not bound to the validated token. An authenticated learner can modify this identifier to bypass configured limits, launch concurrent lab instances, and...

📄 Mysterium Node Improper Authorization

Improper authorization in the /tequilapi/config/user endpoint of Mysterium Node versions from 1.21.1-rc0 up to 1.36.0 allows an unauthenticated attacker to arbitrarily overwrite the node's configuration and achieve a full node takeover via a crafted POST request. CVE-2026-31309: Improper Access...

Exploit for CVE-2026-21045

CVE-2026-21045 & CVE-2026-21048 — Samsung libimagecodec.quram...

Exploit for CVE-2026-48909

CVE-2026-48909-Joomla-SP-Exploit CVE-2026-48909 - Unauthentica...

labs

Security Labs !Licensehttps://img.shields.io/github/licen...

Exploit for Signal Handler Race Condition in Sonicwall Sma_6200_Firmware

OpenSSH Security Auditor regreSSHion & 2026 Flaws A lightwe...

Exploit for CVE-2026-3891

CVE-2026-3891 — Pix for WooCommerce Unauthenticated File Upload...

Exploit for CVE-2026-13001

CVE-2026-13001 — Podlove Podcast Publisher Unauthenticated File...

Exploit for CVE-2026-3891

CVE-2026-3891-Pix-for-WooCommerce-Plugin-Exploit 🛡️ Descri...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Moodle

CVE-2025-32044 — Moodle Unauthenticated REST API User Data Expos...

CVE-Hunter

CVE Hunter Pro A Chrome extension for fast, single-lookup CVE...

Exploit for CVE-2026-14960

Privilege Escalation Vulnerabilities in Pegatron TdeIo64 Drive...

OIBSIP_CyberSecurty_Task-9

SQL Injection — DVWA & SQLMap Task 5 of the Oasis InfoByte...

Exploit for Server-Side Request Forgery in Sonicwall Sma6210_Firmware

🚨 CVE-2026-15409 Critical Unauthenticated SSRF in SonicWall...

bug-bounty-toolkit

Bug Bounty Toolkit Automated reconnaissance-to-triage pipelin...

Exploit for Server-Side Request Forgery in Sonicwall Sma6210_Firmware

CVE-2026-15409 This repo contains a proof-of-concept exploi...

SuperAlts-Discord-Services-Pentest

SuperAlts Security Assessment Executive Summary This repo...